dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.0-debian-fips-dev, 2026.10.0-debian13-fips-dev, 2026.10.0-fips-dev
sha256:290353bc0b104dcff658f52a331ae95428e57b62832b8c0d9891b60ff14ef6c5
Manifest digest:sha256:0700d859a8f13859217b1144dc790e6d2ae3b8805ce09f30f4e463249de7d085
Size
41.99 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:8839429ce50f3b9b89d934c9229a5c9ec754acb9db5d4962d7decc9d5d9fbfdb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:c1eaf729ac438578f15a28ccae3d76bf4174ebc0b03ffbf884db53afbaa42853 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:c3fc6617a4d199c7bc224f3414eabf778a33ef5febbae3bfd6723558369b7a68 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:45ce262105e34f369d9617c228e66e684f35436176c9a0ca044e4789e8ee22e9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:aca4f3ecc2a7890651da17cda48a424961057c6e22614e79668fde4fa0d8449a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:9aa96d380073e444f1c195119403a3c67ab0f5cc4991c7625c107e8a70c80b38 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:fc21192f0ecab5f283fc7762bf9783cb3a3ae0309260bac854e37b3f4459c05b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:42f8a987117bbf9c8461d51c35ddd40365b17c50d5b5b049a21326e9c735abe5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:8fab6636119d9d0ab6cac9ec6f5bd7c0dbf7ba1786baee1f85886899f1ec2ecf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:91021a28b0be53cb3b88a35f61073f73783dba7284c079f92aaf27b0b3b3ae17 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:843df90f88aaccf5bbd2d518b3cdcc02ff982e56337ed4aba432919c6a5bc025 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:997726b30e4967c87732185551c829ba0a4140ff1742a3eefe7d47ee30c4b932 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:edcacb11a1161e9d982e5a138e1906c01a541f46fca0f6cbb5413416a2afb499 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:586f3f6fb44b206fa59d930e7258a845a7c1cf9f6ca0f77735d61e5ff5509f35 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:f16d054eb9398a804d351722871e66c36f3eabc74b239af243c2a0a4aaaadfdb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:d50e30f2d8fc27dcbf53f865e207d366fe0141f1a5c0027cc11235fa20553983 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:801f0c2e2f9da3327b3d62ffe3d11c204b6ee7f1ff275cedaa71dfa3a8997771 |